A lot of developers are using version control systems such as SVN (Apache Subversion) and GIT in order to track changes in their source code. These types of server tools are essential for the organizations which have multi-developer projects. Most of these version control systems…
Tag Archives v10
FAQ: Invicti WVS Scan Settings templates
Scan Settings templates give you the ability to configure the scanner and save such configuration settings as a template for future use, instead of having to reconfigure the global scanner settings for different targets. Using Scan Settings Templates, you can quickly recall scanning options, headers…
FAQ: Which Web Security Alerts are Detected by the Invicti Crawler?
Invicti displays vulnerability alerts and threats in real-time throughout the scan. Before scanning a website or web application, Invicti first crawls the website to find all available inputs and links that can be manipulated later during the scanning stage. However, some of these web security…
FAQ: Is it possible to have different scan settings templates?
In version 8 of WVS, it is possible to save the settings used to scan a website as a template. It is possible to have as many scan settings templates as you like, and they can all be recalled on the fly when performing repetitive…
FAQ: How can I scan multiple websites with Invicti WVS?
Invicti Web Vulnerability Scanner provides the functionality to scan multiple websites at the same time through the web-based Invicti WVS Scheduler. The Invicti Scheduler will run a new WVS instance for each website scheduled to be scanned. The number of instances that the Invicti WVS…
Why does Invicti WVS detect site pages that don’t exist?
Some websites are designed to use custom 404 error pages instead of a web browser’s standard error page because they can be branded and made to contain useful links to other important pages. If your website uses custom 404 error pages — which generate different…
Why did Invicti WVS display a message window stating that URL rewrite was detected during a scan?
URL rewrite (ex. mod_rewrite) is a common technology which is enabled on a web server to change the format of the URL being requested on the fly, for search engine crawling purposes. Common example: http://testasp.vulnweb.com/showthread.asp?id=1 can be rewritten automatically into: http://testasp.vulnweb.com/showthread.asp/id/1 ?id=1 is a parameter…
How can I define my own URL rewrite rules?
When used by a website, URL rewrite rules need to be defined in Invicti WVS to instruct the Crawler on how to recognize rewritten URLs, otherwise some URLs will be misinterpreted as directories — which will result in an incorrect scan. In this FAQ we…
Why isn’t my website’s web technology listed in the scan wizard?
Invicti WVS is designed to perform a web security scan by using a web application as an exploitable front-end, through which it can make contact with a web server. This approach ensures that WVS does not rely on specific compatible web-servers or web technology for…